latex-conference-template-organizer

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes several standard shell utilities, including unzip, find, grep, mkdir, cp, and rm, to manage and process files within a temporary workspace (/tmp/latex-template-temp). These commands are hardcoded for file manipulation and organization tasks consistent with the skill's stated purpose.
  • [EXTERNAL_DOWNLOADS]: The skill employs a WebFetch tool to access conference submission pages provided by the user. This is used to automatically extract metadata such as page limits and anonymity requirements to populate a README file. This functionality is triggered by user input and targets legitimate conference websites.
  • [SAFE]: There are no signs of obfuscated code, hardcoded credentials, or persistence mechanisms. The skill's operations are transparent and restricted to processing the user-provided template files and generating an output project directory.
  • [PROMPT_INJECTION]: While the skill processes external data from ZIP files and fetched URLs—creating a surface for indirect prompt injection—this behavior is necessary for its primary function. No malicious patterns were identified in how this data is handled, and the risk is considered low and typical for document processing tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 08:50 AM